douke6881 2016-01-17 15:12
浏览 60
已采纳

如何静态链接使用crypto / tls的Go二进制文件?

If you try to compile the following Go program:

package main

import _ "crypto/tls"

func main() {

}

You'll wind up with a dynamically linked Go binary. This is annoying for me (I'm building a Go binary inside a Docker container, which uses a different libc from my host, which will result in the binary not running on my host).

How does one force Go to build such a program statically?

  • 写回答

1条回答 默认 最新

  • dousao8152 2016-01-17 15:44
    关注

    The only OS where crypto/tls uses cgo is darwin, where it needs to call FetchPEMRootsto get the root CAs.

    The reason your program is using cgo is because crypto/tls imports the net package, which links to the host resolver by default. You can build the net package without cgo using the "netgo" build tag.

    go build -tags netgo
    

    Or if you're on a release where the std lib packages won't be built by default, you can trigger them to be compiled with a new installsuffix

    go build -installsuffix netgo -tags netgo
    

    Since you're not going to have the need or ability to use cgo in your environment, you may want to just build everything with CGO_ENABLED=0 to disable cgo entirely.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?